TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.
A new report in Security Week warns about a cyberattack that infected 5,561 GitHub open-source repositories with malware.